33564 matches found
cve-2014-0160-heartbleed
This repository does not have a README...
freePW_tc7200Eploit
此仓库包含一个针对CVE-2014-1677漏洞的PoC iPhone应用。 该漏洞/缺陷早已公开,修复本应早在很久以前就推出。 希望这个应用能促使某人推送修复补丁, 与此同时,尽情享受吧 --"...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
libvirt-CVE-2014-1447
This repository does not have a README...
openssl-ccs-cve-2014-0224
Adam Langley 的工具,用于测试 OpenSSL CVE-2014-0224, 最初发布在这里:https://www.imperialviolet.org/2014/06/05/earlyccs.html 构建该工具: root@kitploit: $ export GOPATH=$pwd $ go build openssl-ccs-cve-2014-0224.go 已在 go 1.2.2 和 1.3 上测试。 src/my-tls 目录包含 crypto/tls 包的修补版本。...
knockbleed
knockbleed CVE-2014-0160 mass test against subdomains Requirement: Knock Subdomain Scan by Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed by Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Usage: root@kitploit: sid@sweethome:$ ./knockbleed.sh...
exploit-CVE-2014-6271
exploit-CVE-2014-6271 docker run --rm -d -p :80 vulnerables/cve-2014-6271 sh exploit-cli.sh...
heartbleed-poc
HeartBleed 测试与利用工具 注意 目前几乎所有工具(nmap、metasploit、nessus,甚至burp)都已拥有最新版本的扫描器。这些工具是在早期工具仍在开发时发布的。现在请优先使用那些工具,而非这些。 工具指南 若要进行大规模扫描,目前NMAP脚本是最佳选择。 如需支持最多的协议(STARTTLS),请使用修改后的Metasploit脚本。 若要进行实际利用,请使用Python脚本(针对非SMTP的STARTTLS需要修改)。 Python 工具 用法: heartbleed-poc.py server options 测试SSL心跳漏洞 CVE-2014-0160...
shellshock_scanner
shellshockscanner Python Scanner for "ShellShock" CVE-2014-6271...
CVE-2014-6721-exploit-Shellshock
CVE-2014-6721-exploit-Shellshock exploit of the Shellshock vulnerability...
patched-bash-4.3
patched-bash-4.3 patched-bash-4.3 for CVE-2014-6271 This is just bash 4.3 , pulled from the gnu website, and patched with the patches available on 9/26/2014, including the pkgsrc functionality changes that just disable the silly "execute functions in env variables" altogether. The patches are als...
cve-2014-6271-spec
This repository does not have a README...
cve-2014-6287.py
Modified version of CVE-2014-6287 python script...
heartbleed-vulnerability-exploitation
heartbleed-vulnerability-exploitation 描述 对 Heartbleed 漏洞(CVE-2014-0160)的实践性调查。 摘要 本实验记录了对 Heartbleed 漏洞的实践性调查,该漏洞是 OpenSSL 在 TLS 心跳扩展实现中的一个严重缺陷。目标是理解该漏洞在协议层面的工作原理,并在受控环境中利用它来观察其影响,从而练习与 SOC 分析(漏洞评估与影响分析)直接相关的技能。 目标 理解 Heartbleed 的根本原因(OpenSSL 心跳扩展中的边界检查不当)。 使用侦察和扫描工具识别存在漏洞的 OpenSSL 服务。...
bro-shellshock
ShellShock Detector for Bro This script detects successful exploitation of the Bash vulnerability with CVE-2014-6271 nicknamed "ShellShock". It's more comprehensive than most of the detections around in that it's watching for behavior from the attacked host that might indicate successful compromi...
burp-alfresco-referer-proxy-cve-2014-9301
burp-alfresco-referer-proxy-cve-2014-9301...
cve-2014-0130
== CVE-2014-0130 Test Case Payload : http://site/api/%5C../%5C../%5C../%5C../%5C../CATDIR === Netsparker Detected : https://i.imgur.com/s1vahmj.png == HackerOne 1 - newrelic.com rails directory traversal vuln by droidsec - https://hackerone.com/reports/134032 == Reference 1...
Exploit-CVE-2014-4113
Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...
thm_steelmountain_CVE-2014-6287
thmsteelmountainCVE-2014-6287 a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit...
CVE-2014-3566-poodle-cookbook
CVE-2014-3566-poodle This cookbook will error out your chef run if your server is vulnerable to CVE-2014-3566. Although this cookbook can be used to watch for failed chef runs, it is also a proof of concept. Supported Platforms Ubuntu 12.04 Centos-6.4 Attributes...